37474 matches found
EUVD-2026-4504
EUVD-2026-4504...
EUVD-2026-4501
EUVD-2026-4501...
EUVD-2026-4502
EUVD-2026-4502...
EUVD-2026-4500
EUVD-2026-4500...
EUVD-2026-4498
EUVD-2026-4498...
EUVD-2026-4506
EUVD-2026-4506...
EUVD-2026-4507
EUVD-2026-4507...
CVE-2025-67125
A signed integer overflow in docopt.cpp v0.6.2 LeafPattern::match in docoptprivate.h when merging occurrence counters e.g., default LONGMAX + first user "-v/--verbose" can cause counter wrap negative/unbounded semantics and lead to logic/policy bypass in applications that rely on occurrence-based...
EUVD-2026-4415
An unauthenticated information disclosure vulnerability exists in Newgen OmniDocs due to missing authentication and access control on the /omnidocs/GetListofCabinet API endpoint. A remote attacker can access this endpoint without valid credentials to retrieve sensitive internal configuration...
EUVD-2026-4231
An issue was discovered in Free5gc NRF 1.4.0. In the access-token generation logic of free5GC, the AccessTokenScopeCheck function in file internal/sbi/processor/accesstoken.go bypasses all scope validation when the attacker uses a crafted targetNF value. This allows attackers to obtain an access...
EUVD-2026-4310
An unauthenticated information disclosure vulnerability in Newgen OmniApp allows attackers to enumerate valid privileged usernames via a publicly accessible client-side JavaScript resource...
PT-2026-4512
Name of the Vulnerable Software and Affected Versions PDF Complete Corporate Edition version 4.1.45 Description The software contains an unquoted service path issue in the pdfcDispatcher service. This allows local attackers to potentially execute arbitrary code. Exploitation involves leveraging t...
EUVD-2026-4249
A reflected cross-site scripting XSS vulnerability in ToDesktop Builder v0.33.1 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload...
EUVD-2026-4255
A vulnerability in the PHP backend of gemscms.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed error messages that disclose internal file paths, code snippets, and stack traces. This occurs when specially crafted HTTP GET/POST requests are sent to public A...
EUVD-2026-4243
An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof backend responses by exploiting insufficient certificate validation...
PT-2026-4446
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Devsbrain Flex QR Code Generator flex-qr-code-generator allows DOM-Based XSS.This issue affects Flex QR Code Generator: from n/a through = 1.2.8...
EUVD-2026-4223
An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025-05-28. This unauthenticated endpoint returns a list of cashier accounts, including names, email addresses, usernames, and passwords hashed using MD5. As MD5 ...
PT-2026-4452
Name of the Vulnerable Software and Affected Versions Terms descriptions versions through 3.4.9 Description The software contains a flaw related to improper input handling during web page generation, leading to a DOM-Based Cross-site Scripting XSS condition. This allows for potential malicious co...